mates-auth 1.0.0-beta.1

package/dist/use-arctic.js

@@ -0,0 +1,538 @@
+import { Apple, Discord, Facebook, GitHub, GitLab, Google, LinkedIn, MicrosoftEntraId, Spotify, Twitter, decodeIdToken, generateCodeVerifier, generateState, } from "arctic";
+import { onRequest, } from "mates-fullstack";
+const DEFAULT_STATE_MAX_AGE = 60 * 10;
+/**
+ * Register social login routes for every configured provider.
+ *
+ * The framework automatically handles:
+ *   GET /auth/:provider          — redirect to provider
+ *   GET /auth/:provider/callback — exchange code, call onSuccess, set cookies
+ *
+ * @example
+ * useArctic({
+ *   google: {
+ *     clientId: process.env.GOOGLE_CLIENT_ID!,
+ *     clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
+ *     onSuccess: async (profile) => {
+ *       const user = await db.upsert({ provider: profile.provider, providerId: profile.id, ... });
+ *       return { userId: user.id, email: user.email, roles: user.roles };
+ *     },
+ *   },
+ * });
+ */
+export function useArctic(providers, options = {}) {
+    const resolved = resolveOptions(options);
+    const normalizedProviders = normalizeProviders(providers);
+    onRequest(async (c) => {
+        const match = matchArcticRoute(c.req.raw, resolved.basePath);
+        if (!match)
+            return;
+        const entry = normalizedProviders[match.provider];
+        if (!entry) {
+            return Response.json({
+                error: `OAuth provider "${match.provider}" is not configured`,
+                configured: Object.keys(normalizedProviders),
+                supported: listArcticProviders(),
+            }, { status: 404 });
+        }
+        try {
+            if (match.action === "start") {
+                return await startOAuth(c.req.raw, c, match.provider, entry, resolved);
+            }
+            return await finishOAuth(c.req.raw, c, match.provider, entry, resolved);
+        }
+        catch (error) {
+            return handleArcticError(error, resolved);
+        }
+    });
+}
+/** Define a custom Arctic provider adapter for providers without a built-in profile normalizer. */
+export function arcticProvider(config) {
+    return config;
+}
+export function listArcticProviders() {
+    return Object.keys(BUILT_IN_PROVIDERS);
+}
+async function startOAuth(req, ctx, providerName, entry, options) {
+    const url = new URL(req.url);
+    const redirectUri = getRedirectUri(url, providerName, entry.config, options);
+    const state = generateState();
+    const codeVerifier = entry.handler.usesPKCE || entry.config.usesPKCE
+        ? generateCodeVerifier()
+        : null;
+    const scopes = entry.config.scopes ?? entry.handler.defaultScopes;
+    const authUrl = await entry.handler.start({ ...entry.config, scopes }, redirectUri, state, codeVerifier);
+    const next = safeRedirectPath(url.searchParams.get("next"), null);
+    setTemporaryCookie(ctx, stateCookieName(providerName), state, options);
+    if (codeVerifier) {
+        setTemporaryCookie(ctx, verifierCookieName(providerName), codeVerifier, options);
+    }
+    if (next) {
+        setTemporaryCookie(ctx, nextCookieName(providerName), next, options);
+    }
+    return redirectResponse(authUrl.toString());
+}
+async function finishOAuth(req, ctx, providerName, entry, options) {
+    const url = new URL(req.url);
+    const providerError = url.searchParams.get("error");
+    if (providerError) {
+        throw new Error(`OAuth provider returned ${providerError}: ${url.searchParams.get("error_description") ?? "No description"}`);
+    }
+    const code = url.searchParams.get("code");
+    const state = url.searchParams.get("state");
+    const storedState = ctx.cookie.get(stateCookieName(providerName));
+    const codeVerifier = ctx.cookie.get(verifierCookieName(providerName)) ?? null;
+    clearTemporaryCookies(ctx, providerName, options);
+    if (!code || !state || !storedState || !timingSafeEqual(state, storedState)) {
+        return new Response("Invalid OAuth state", { status: 400 });
+    }
+    const redirectUri = getRedirectUri(url, providerName, entry.config, options);
+    const profile = await entry.handler.callback(entry.config, redirectUri, code, codeVerifier, providerName);
+    const redirectTo = await entry.config.onSuccess(profile, ctx);
+    const next = ctx.cookie.get(nextCookieName(providerName));
+    const location = safeRedirectPath(redirectTo ?? null, null) ??
+        safeRedirectPath(next, null) ??
+        options.afterLogin;
+    return redirectResponse(location);
+}
+function handleArcticError(error, options) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (options.onErrorRedirect) {
+        const redirectUrl = new URL(options.onErrorRedirect, "http://mates.local");
+        redirectUrl.searchParams.set("error", "oauth_failed");
+        return redirectResponse(`${redirectUrl.pathname}${redirectUrl.search}${redirectUrl.hash}`);
+    }
+    const isProd = process.env.NODE_ENV === "production";
+    return Response.json({
+        error: "OAuth authentication failed",
+        ...(isProd ? {} : { message }),
+    }, { status: 400 });
+}
+function normalizeProviders(providers) {
+    const normalized = {};
+    for (const [rawName, rawConfig] of Object.entries(providers)) {
+        if (!rawConfig)
+            continue;
+        const name = rawName.toLowerCase();
+        const maybeCustom = rawConfig;
+        const handler = maybeCustom.handler ?? BUILT_IN_PROVIDERS[name];
+        if (!handler) {
+            throw new Error(`[mates-fullstack-auth] useArctic: "${rawName}" is not built in. ` +
+                "Use arcticProvider({ handler, ...config }) for custom Arctic providers.");
+        }
+        normalized[name] = { config: rawConfig, handler };
+    }
+    return normalized;
+}
+function resolveOptions(options) {
+    const basePath = normalizeBasePath(options.basePath ?? "/auth");
+    return {
+        basePath,
+        afterLogin: safeRedirectPath(options.afterLogin, "/") ?? "/",
+        onErrorRedirect: options.onErrorRedirect,
+        cookie: {
+            path: options.cookie?.path ?? basePath,
+            domain: options.cookie?.domain,
+            sameSite: options.cookie?.sameSite ?? "lax",
+            secure: options.cookie?.secure ?? process.env.NODE_ENV === "production",
+        },
+        stateMaxAge: options.stateMaxAge ?? DEFAULT_STATE_MAX_AGE,
+    };
+}
+function matchArcticRoute(req, basePath) {
+    if (req.method !== "GET")
+        return null;
+    const url = new URL(req.url);
+    const path = trimSlashes(url.pathname);
+    const base = trimSlashes(basePath);
+    const parts = path.split("/").filter(Boolean);
+    const baseParts = base ? base.split("/") : [];
+    if (parts.length !== baseParts.length + 1 &&
+        parts.length !== baseParts.length + 2) {
+        return null;
+    }
+    for (let i = 0; i < baseParts.length; i += 1) {
+        if (parts[i] !== baseParts[i])
+            return null;
+    }
+    const provider = parts[baseParts.length]?.toLowerCase();
+    if (!provider)
+        return null;
+    if (parts.length === baseParts.length + 1)
+        return { provider, action: "start" };
+    if (parts[baseParts.length + 1] === "callback")
+        return { provider, action: "callback" };
+    return null;
+}
+function getRedirectUri(url, providerName, config, options) {
+    return (config.redirectUri ??
+        `${url.protocol}//${url.host}${options.basePath}/${providerName}/callback`);
+}
+function setTemporaryCookie(ctx, name, value, options) {
+    ctx.cookie.set(name, value, {
+        ...options.cookie,
+        httpOnly: true,
+        maxAge: options.stateMaxAge,
+    });
+}
+function clearTemporaryCookies(ctx, providerName, options) {
+    const cookieOptions = {
+        path: options.cookie.path,
+        domain: options.cookie.domain,
+    };
+    ctx.cookie.delete(stateCookieName(providerName), cookieOptions);
+    ctx.cookie.delete(verifierCookieName(providerName), cookieOptions);
+    ctx.cookie.delete(nextCookieName(providerName), cookieOptions);
+}
+function stateCookieName(provider) {
+    return `mates_oauth_${provider}_state`;
+}
+function verifierCookieName(provider) {
+    return `mates_oauth_${provider}_verifier`;
+}
+function nextCookieName(provider) {
+    return `mates_oauth_${provider}_next`;
+}
+function redirectResponse(location) {
+    return new Response(null, { status: 302, headers: { location } });
+}
+function normalizeBasePath(path) {
+    const trimmed = `/${trimSlashes(path)}`;
+    return trimmed === "/" ? "" : trimmed;
+}
+function trimSlashes(value) {
+    return value.replace(/^\/+|\/+$/g, "");
+}
+function safeRedirectPath(value, fallback) {
+    if (!value)
+        return fallback;
+    return value.startsWith("/") && !value.startsWith("//") ? value : fallback;
+}
+function timingSafeEqual(a, b) {
+    const aBytes = new TextEncoder().encode(a);
+    const bBytes = new TextEncoder().encode(b);
+    if (aBytes.length !== bBytes.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < aBytes.length; i += 1) {
+        diff |= aBytes[i] ^ bBytes[i];
+    }
+    return diff === 0;
+}
+function tokenSet(tokens) {
+    return {
+        accessToken: safeTokenCall(() => tokens.accessToken()),
+        refreshToken: tokens.hasRefreshToken()
+            ? safeTokenCall(() => tokens.refreshToken())
+            : null,
+        idToken: safeTokenCall(() => tokens.idToken()),
+        tokenType: safeTokenCall(() => tokens.tokenType()),
+        expiresAt: safeTokenCall(() => tokens.accessTokenExpiresAt()),
+        scopes: tokens.hasScopes() ? safeTokenCall(() => tokens.scopes()) : null,
+        raw: tokens.data,
+    };
+}
+function safeTokenCall(callback) {
+    try {
+        return callback();
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchJson(url, accessToken, init = {}) {
+    const headers = new Headers(init.headers);
+    headers.set("authorization", `Bearer ${accessToken}`);
+    const res = await fetch(url, { ...init, headers });
+    if (!res.ok)
+        throw new Error(`OAuth profile fetch failed (${res.status})`);
+    return (await res.json());
+}
+function requireAccessToken(tokens, provider) {
+    if (!tokens.accessToken) {
+        throw new Error(`[mates-fullstack-auth] ${provider} did not return an access token.`);
+    }
+    return tokens.accessToken;
+}
+function requireAppleConfig(config) {
+    if (!config.teamId || !config.keyId || !config.privateKey) {
+        throw new Error("[mates-fullstack-auth] Apple OAuth requires teamId, keyId, and privateKey.");
+    }
+}
+const github = {
+    defaultScopes: ["user:email"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new GitHub(config.clientId, config.clientSecret ?? "", redirectUri).createAuthorizationURL(state, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const tokens = await new GitHub(config.clientId, config.clientSecret ?? "", redirectUri).validateAuthorizationCode(code);
+        if (config.profile)
+            return withProvider("github", tokens, await config.profile(tokens, "github"));
+        const normalizedTokens = tokenSet(tokens);
+        const accessToken = requireAccessToken(normalizedTokens, "github");
+        const user = await fetchJson("https://api.github.com/user", accessToken, {
+            headers: { "user-agent": "mates-fullstack" },
+        });
+        let email = typeof user.email === "string" ? user.email : null;
+        if (!email) {
+            const emails = await fetchJson("https://api.github.com/user/emails", accessToken, { headers: { "user-agent": "mates-fullstack" } });
+            email =
+                emails.find((item) => item.primary === true && item.verified === true)
+                    ?.email ??
+                    emails.find((item) => typeof item.email === "string")
+                        ?.email ??
+                    null;
+        }
+        return {
+            provider: "github",
+            id: String(user.id),
+            email,
+            name: stringOrNull(user.name) ?? stringOrNull(user.login),
+            username: stringOrNull(user.login),
+            avatar: stringOrNull(user.avatar_url),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const google = {
+    defaultScopes: ["openid", "profile", "email"],
+    usesPKCE: true,
+    start(config, redirectUri, state, codeVerifier) {
+        return new Google(config.clientId, config.clientSecret ?? "", redirectUri).createAuthorizationURL(state, codeVerifier ?? "", config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code, codeVerifier) {
+        const tokens = await new Google(config.clientId, config.clientSecret ?? "", redirectUri).validateAuthorizationCode(code, codeVerifier ?? "");
+        if (config.profile)
+            return withProvider("google", tokens, await config.profile(tokens, "google"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://openidconnect.googleapis.com/v1/userinfo", requireAccessToken(normalizedTokens, "google"));
+        return {
+            provider: "google",
+            id: String(user.sub),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.name),
+            avatar: stringOrNull(user.picture),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const discord = {
+    defaultScopes: ["identify", "email"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new Discord(config.clientId, config.clientSecret ?? null, redirectUri).createAuthorizationURL(state, null, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const tokens = await new Discord(config.clientId, config.clientSecret ?? null, redirectUri).validateAuthorizationCode(code, null);
+        if (config.profile)
+            return withProvider("discord", tokens, await config.profile(tokens, "discord"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://discord.com/api/users/@me", requireAccessToken(normalizedTokens, "discord"));
+        const avatarHash = stringOrNull(user.avatar);
+        const id = String(user.id);
+        return {
+            provider: "discord",
+            id,
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.global_name) ?? stringOrNull(user.username),
+            username: stringOrNull(user.username),
+            avatar: avatarHash
+                ? `https://cdn.discordapp.com/avatars/${id}/${avatarHash}.png`
+                : null,
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const microsoft = {
+    defaultScopes: ["openid", "profile", "email"],
+    usesPKCE: true,
+    start(config, redirectUri, state, codeVerifier) {
+        return new MicrosoftEntraId(config.tenant ?? "common", config.clientId, config.clientSecret ?? null, redirectUri).createAuthorizationURL(state, codeVerifier ?? "", config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code, codeVerifier) {
+        const tokens = await new MicrosoftEntraId(config.tenant ?? "common", config.clientId, config.clientSecret ?? null, redirectUri).validateAuthorizationCode(code, codeVerifier ?? "");
+        if (config.profile)
+            return withProvider("microsoft", tokens, await config.profile(tokens, "microsoft"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://graph.microsoft.com/oidc/userinfo", requireAccessToken(normalizedTokens, "microsoft"));
+        return {
+            provider: "microsoft",
+            id: String(user.sub),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.name),
+            avatar: stringOrNull(user.picture),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const twitter = {
+    defaultScopes: ["users.read", "tweet.read"],
+    usesPKCE: true,
+    start(config, redirectUri, state, codeVerifier) {
+        return new Twitter(config.clientId, config.clientSecret ?? null, redirectUri).createAuthorizationURL(state, codeVerifier ?? "", config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code, codeVerifier) {
+        const tokens = await new Twitter(config.clientId, config.clientSecret ?? null, redirectUri).validateAuthorizationCode(code, codeVerifier ?? "");
+        if (config.profile)
+            return withProvider("twitter", tokens, await config.profile(tokens, "twitter"));
+        const normalizedTokens = tokenSet(tokens);
+        const { data } = await fetchJson("https://api.twitter.com/2/users/me?user.fields=profile_image_url,name,username", requireAccessToken(normalizedTokens, "twitter"));
+        return {
+            provider: "twitter",
+            id: String(data.id),
+            email: null,
+            name: stringOrNull(data.name) ?? stringOrNull(data.username),
+            username: stringOrNull(data.username),
+            avatar: stringOrNull(data.profile_image_url),
+            raw: data,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const linkedin = {
+    defaultScopes: ["openid", "profile", "email"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new LinkedIn(config.clientId, config.clientSecret ?? "", redirectUri).createAuthorizationURL(state, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const tokens = await new LinkedIn(config.clientId, config.clientSecret ?? "", redirectUri).validateAuthorizationCode(code);
+        if (config.profile)
+            return withProvider("linkedin", tokens, await config.profile(tokens, "linkedin"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://api.linkedin.com/v2/userinfo", requireAccessToken(normalizedTokens, "linkedin"));
+        return {
+            provider: "linkedin",
+            id: String(user.sub),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.name),
+            avatar: stringOrNull(user.picture),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const facebook = {
+    defaultScopes: ["email", "public_profile"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new Facebook(config.clientId, config.clientSecret ?? "", redirectUri).createAuthorizationURL(state, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const tokens = await new Facebook(config.clientId, config.clientSecret ?? "", redirectUri).validateAuthorizationCode(code);
+        if (config.profile)
+            return withProvider("facebook", tokens, await config.profile(tokens, "facebook"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://graph.facebook.com/me?fields=id,name,email,picture.type(large)", requireAccessToken(normalizedTokens, "facebook"));
+        const picture = user.picture;
+        return {
+            provider: "facebook",
+            id: String(user.id),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.name),
+            avatar: stringOrNull(picture?.data?.url),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const apple = {
+    defaultScopes: ["name", "email"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        requireAppleConfig(config);
+        return new Apple(config.clientId, config.teamId, config.keyId, new TextEncoder().encode(config.privateKey), redirectUri).createAuthorizationURL(state, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        requireAppleConfig(config);
+        const tokens = await new Apple(config.clientId, config.teamId, config.keyId, new TextEncoder().encode(config.privateKey), redirectUri).validateAuthorizationCode(code);
+        if (config.profile)
+            return withProvider("apple", tokens, await config.profile(tokens, "apple"));
+        const normalizedTokens = tokenSet(tokens);
+        const claims = normalizedTokens.idToken
+            ? decodeIdToken(normalizedTokens.idToken)
+            : {};
+        return {
+            provider: "apple",
+            id: String(claims.sub),
+            email: stringOrNull(claims.email),
+            name: null,
+            avatar: null,
+            raw: claims,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const spotify = {
+    defaultScopes: ["user-read-email", "user-read-private"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new Spotify(config.clientId, config.clientSecret ?? null, redirectUri).createAuthorizationURL(state, null, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const tokens = await new Spotify(config.clientId, config.clientSecret ?? null, redirectUri).validateAuthorizationCode(code, null);
+        if (config.profile)
+            return withProvider("spotify", tokens, await config.profile(tokens, "spotify"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson("https://api.spotify.com/v1/me", requireAccessToken(normalizedTokens, "spotify"));
+        const images = user.images;
+        return {
+            provider: "spotify",
+            id: String(user.id),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.display_name),
+            avatar: stringOrNull(images?.[0]?.url),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+const gitlab = {
+    defaultScopes: ["read_user"],
+    usesPKCE: false,
+    start(config, redirectUri, state) {
+        return new GitLab(config.baseURL ?? "https://gitlab.com", config.clientId, config.clientSecret ?? null, redirectUri).createAuthorizationURL(state, config.scopes ?? this.defaultScopes);
+    },
+    async callback(config, redirectUri, code) {
+        const baseURL = config.baseURL ?? "https://gitlab.com";
+        const tokens = await new GitLab(baseURL, config.clientId, config.clientSecret ?? null, redirectUri).validateAuthorizationCode(code);
+        if (config.profile)
+            return withProvider("gitlab", tokens, await config.profile(tokens, "gitlab"));
+        const normalizedTokens = tokenSet(tokens);
+        const user = await fetchJson(`${baseURL.replace(/\/+$/g, "")}/api/v4/user`, requireAccessToken(normalizedTokens, "gitlab"));
+        return {
+            provider: "gitlab",
+            id: String(user.id),
+            email: stringOrNull(user.email),
+            name: stringOrNull(user.name) ?? stringOrNull(user.username),
+            username: stringOrNull(user.username),
+            avatar: stringOrNull(user.avatar_url),
+            raw: user,
+            tokens: normalizedTokens,
+        };
+    },
+};
+function withProvider(provider, tokens, profile) {
+    return { ...profile, provider, tokens: tokenSet(tokens) };
+}
+function stringOrNull(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+const BUILT_IN_PROVIDERS = {
+    apple,
+    discord,
+    facebook,
+    github,
+    gitlab,
+    google,
+    linkedin,
+    microsoft,
+    spotify,
+    twitter,
+};
+//# sourceMappingURL=use-arctic.js.map

package/dist/use-arctic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-arctic.js","sourceRoot":"","sources":["../src/use-arctic.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,MAAM,EACN,MAAM,EACN,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,OAAO,EACP,OAAO,EACP,aAAa,EACb,oBAAoB,EACpB,aAAa,GAEd,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,SAAS,GAIV,MAAM,iBAAiB,CAAC;AAgIzB,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,CAAC;AAEtC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,SAAS,CACvB,SAAgC,EAChC,UAA4B,EAAE;IAE9B,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE1D,SAAS,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO;QAEnB,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,IAAI,CAClB;gBACE,KAAK,EAAE,mBAAmB,KAAK,CAAC,QAAQ,qBAAqB;gBAC7D,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBAC5C,SAAS,EAAE,mBAAmB,EAAE;aACjC,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC7B,OAAO,MAAM,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAC5B,MAA4B;IAE5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAA4B,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,GAAY,EACZ,GAAY,EACZ,YAAoB,EACpB,KAAyB,EACzB,OAA8B;IAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAChB,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ;QAC7C,CAAC,CAAC,oBAAoB,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CACvC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAC3B,WAAW,EACX,KAAK,EACL,YAAY,CACb,CAAC;IACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAElE,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvE,IAAI,YAAY,EAAE,CAAC;QACjB,kBAAkB,CAChB,GAAG,EACH,kBAAkB,CAAC,YAAY,CAAC,EAChC,YAAY,EACZ,OAAO,CACR,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,kBAAkB,CAAC,GAAG,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAY,EACZ,GAAY,EACZ,YAAoB,EACpB,KAAyB,EACzB,OAA8B;IAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,2BAA2B,aAAa,KAAK,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,gBAAgB,EAAE,CAC7G,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC;IAE9E,qBAAqB,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAElD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAC1C,KAAK,CAAC,MAAM,EACZ,WAAW,EACX,IAAI,EACJ,YAAY,EACZ,YAAY,CACb,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAE9D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GACZ,gBAAgB,CAAC,UAAU,IAAI,IAAI,EAAE,IAAI,CAAC;QAC1C,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,OAAO,CAAC,UAAU,CAAC;IACrB,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc,EACd,OAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QAC3E,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtD,OAAO,gBAAgB,CACrB,GAAG,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IACrD,OAAO,QAAQ,CAAC,IAAI,CAClB;QACE,KAAK,EAAE,6BAA6B;QACpC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC/B,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;AACJ,CAAC;AAOD,SAAS,kBAAkB,CACzB,SAAgC;IAEhC,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,SAAiC,CAAC;QACtD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,qBAAqB;gBAChE,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,OAAyB;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;IAChE,OAAO;QACL,QAAQ;QACR,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,GAAG;QAC5D,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM,EAAE;YACN,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ;YACtC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM;YAC9B,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,IAAI,KAAK;YAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;SACxE;QACD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,qBAAqB;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAY,EACZ,QAAgB;IAEhB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,IACE,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC;QACrC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC,EACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,GAAG,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,UAAU;QAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,GAAQ,EACR,YAAoB,EACpB,MAA4B,EAC5B,OAA8B;IAE9B,OAAO,CACL,MAAM,CAAC,WAAW;QAClB,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,YAAY,WAAW,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAY,EACZ,IAAY,EACZ,KAAa,EACb,OAA8B;IAE9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAC1B,GAAG,OAAO,CAAC,MAAM;QACjB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,OAAO,CAAC,WAAW;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAAY,EACZ,YAAoB,EACpB,OAA8B;IAE9B,MAAM,aAAa,GAAG;QACpB,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;KAC9B,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IAChE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;IACnE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,eAAe,QAAQ,QAAQ,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,eAAe,QAAQ,WAAW,CAAC;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,eAAe,QAAQ,OAAO,CAAC;AACxC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IACxC,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACxC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAgC,EAChC,QAAuB;IAEvB,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7E,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAoB;IACpC,OAAO;QACL,WAAW,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACtD,YAAY,EAAE,MAAM,CAAC,eAAe,EAAE;YACpC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC5C,CAAC,CAAC,IAAI;QACR,OAAO,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC9C,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAClD,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC7D,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;QACxE,GAAG,EAAE,MAAM,CAAC,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAI,QAAiB;IACzC,IAAI,CAAC;QACH,OAAO,QAAQ,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,WAAmB,EACnB,OAAoB,EAAE;IAEtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAsB,EAAE,QAAgB;IAClE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,kCAAkC,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA4B;IAM5B,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,MAAM,GAA0B;IACpC,aAAa,EAAE,CAAC,YAAY,CAAC;IAC7B,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,CAC7B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,QAAQ,EACR,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CACvC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,6BAA6B,EAC7B,WAAW,EACX;YACE,OAAO,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE;SAC7C,CACF,CAAC;QACF,IAAI,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,oCAAoC,EACpC,WAAW,EACX,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,EAAE,CACjD,CAAC;YACF,KAAK;gBACF,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;oBACrE,EAAE,KAAgB;oBACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC;wBACpD,EAAE,KAAgB;oBACpB,IAAI,CAAC;QACT,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK;YACL,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YACzD,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YACrC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAA0B;IACpC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IAC7C,QAAQ,EAAE,IAAI;IACd,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY;QAC5C,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,sBAAsB,CACtB,KAAK,EACL,YAAY,IAAI,EAAE,EAClB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CACpC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,CAC7B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,QAAQ,EACR,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CACvC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,kDAAkD,EAClD,kBAAkB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAC/C,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,OAAO,GAA0B;IACrC,aAAa,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IACpC,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,OAAO,CAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,SAAS,EACT,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CACxC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,mCAAmC,EACnC,kBAAkB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAChD,CAAC;QACF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,EAAE;YACF,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACnE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,UAAU;gBAChB,CAAC,CAAC,sCAAsC,EAAE,IAAI,UAAU,MAAM;gBAC9D,CAAC,CAAC,IAAI;YACR,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,SAAS,GAA0B;IACvC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IAC7C,QAAQ,EAAE,IAAI;IACd,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY;QAC5C,OAAO,IAAI,gBAAgB,CACzB,MAAM,CAAC,MAAM,IAAI,QAAQ,EACzB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,sBAAsB,CACtB,KAAK,EACL,YAAY,IAAI,EAAE,EAClB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CACpC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,gBAAgB,CACvC,MAAM,CAAC,MAAM,IAAI,QAAQ,EACzB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,WAAW,EACX,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAC1C,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,2CAA2C,EAC3C,kBAAkB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAClD,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,WAAW;YACrB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,OAAO,GAA0B;IACrC,aAAa,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IAC3C,QAAQ,EAAE,IAAI;IACd,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY;QAC5C,OAAO,IAAI,OAAO,CAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,sBAAsB,CACtB,KAAK,EACL,YAAY,IAAI,EAAE,EAClB,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CACpC,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,SAAS,EACT,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CACxC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAC9B,gFAAgF,EAChF,kBAAkB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAChD,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5D,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC5C,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAA0B;IACtC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IAC7C,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAC/B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,UAAU,EACV,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CACzC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,sCAAsC,EACtC,kBAAkB,CAAC,gBAAgB,EAAE,UAAU,CAAC,CACjD,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,QAAQ,GAA0B;IACtC,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAC1C,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAC/B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,EAAE,EACzB,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,UAAU,EACV,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CACzC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,wEAAwE,EACxE,kBAAkB,CAAC,gBAAgB,EAAE,UAAU,CAAC,CACjD,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAmD,CAAC;QACzE,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC;YACxC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,KAAK,GAA0B;IACnC,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAChC,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,KAAK,CACd,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,KAAK,EACZ,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAC3C,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,KAAK,CAC5B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,KAAK,EACZ,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAC3C,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,OAAO,EACP,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CACtC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO;YACrC,CAAC,CAAE,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAA6B;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YACtB,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;YACjC,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,IAAI;YACZ,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,OAAO,GAA0B;IACrC,aAAa,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACvD,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,OAAO,CAChB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,SAAS,EACT,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CACxC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,+BAA+B,EAC/B,kBAAkB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAChD,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAA8C,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC;YACrC,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACtC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,MAAM,GAA0B;IACpC,aAAa,EAAE,CAAC,WAAW,CAAC;IAC5B,QAAQ,EAAE,KAAK;IACf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK;QAC9B,OAAO,IAAI,MAAM,CACf,MAAM,CAAC,OAAO,IAAI,oBAAoB,EACtC,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,oBAAoB,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,MAAM,CAC7B,OAAO,EACP,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,IAAI,IAAI,EAC3B,WAAW,CACZ,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,OAAO;YAChB,OAAO,YAAY,CACjB,QAAQ,EACR,MAAM,EACN,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CACvC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,EAC7C,kBAAkB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAC/C,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC5D,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;YACrC,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,gBAAgB;SACzB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,SAAS,YAAY,CACnB,QAAgB,EAChB,MAAoB,EACpB,OAAmD;IAEnD,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,MAAM,kBAAkB,GAA0C;IAChE,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;CACR,CAAC"}

package/dist/use-jwt.d.ts

@@ -0,0 +1,70 @@
+import type { CookieOptions, Context } from "mates-fullstack";
+import { type JwtPayload } from "mates-fullstack";
+export type AuthDuration = number | string;
+export interface AuthClaims extends JwtPayload {
+    /** Canonical user id used by useJWT. Mirrored to `sub` in JWTs. */
+    userId?: string;
+    /** Common display-name aliases. */
+    userName?: string;
+    username?: string;
+    name?: string;
+    email?: string;
+    roles?: string[];
+    [key: string]: unknown;
+}
+export interface AuthContext extends AuthClaims {
+    /** True only when `useJWT()` verified an access token or refreshed it. */
+    isAuthenticated?: boolean;
+}
+export interface JWTOptions {
+    /** JWT/HMAC secret. Falls back to AUTH_JWT_SECRET or JWT_SECRET. */
+    secret?: string;
+    /** Throw `AuthError(401)` when expired/invalid tokens require logout. Default: true. */
+    throwErrorIfTokensExpired?: boolean;
+    /** Access token cookie name. Default: "mates_access". */
+    accessCookieName?: string;
+    /** Refresh token cookie name. Default: "mates_refresh". */
+    refreshCookieName?: string;
+    /** Access token lifetime. Default: "15m". */
+    accessExpiresIn?: AuthDuration;
+    /** Refresh token lifetime. Default: "30d". */
+    refreshExpiresIn?: AuthDuration;
+    /** Cookie path. Default: "/". */
+    path?: string;
+    /** Cookie domain. */
+    domain?: string;
+    /** SameSite policy. Default: "lax". */
+    sameSite?: CookieOptions["sameSite"];
+    /** Secure flag. Default: true in production, false otherwise. */
+    secure?: boolean;
+    /** Refresh hook. Return fresh access claims, or null to force logout. */
+    onRefresh?: (userId: string, refreshPayload: JwtPayload, ctx: Context) => Promise<AuthClaims | null> | AuthClaims | null;
+    /** Optional post-verify hook for tokenVersion, disabled users, etc. */
+    onVerify?: (auth: AuthClaims, ctx: Context) => Promise<boolean> | boolean;
+    /** Extract the canonical user id from claims. */
+    getUserId?: (claims: Record<string, unknown>) => string | undefined;
+    /** Cookie names from older auth implementations to clear on logout and when no current tokens are present. */
+    legacyCookieNames?: string[];
+}
+export interface AuthLoginOptions extends Partial<JWTOptions> {
+}
+/**
+ * Register the JWT auth middleware. Call once at module level in
+ * server/main.ts. It verifies httpOnly access/refresh tokens, updates
+ * `ctx.auth`, and clears cookies on logout.
+ */
+export declare function useJWT(options?: JWTOptions): void;
+export declare const auth: {
+    /**
+     * Create access/refresh token pair, set httpOnly cookies, and update
+     * `ctx.auth` for this request.
+     */
+    login(ctx: Context, payload: AuthClaims, options?: AuthLoginOptions): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        auth: AuthContext;
+    }>;
+    /** Clear access and refresh cookies. */
+    logout(ctx: Context, options?: Partial<JWTOptions>): void;
+};
+//# sourceMappingURL=use-jwt.d.ts.map

package/dist/use-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-jwt.d.ts","sourceRoot":"","sources":["../src/use-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE9D,OAAO,EAAO,KAAK,UAAU,EAAuB,MAAM,iBAAiB,CAAC;AAG5E,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,0EAA0E;IAC1E,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,yDAAyD;IACzD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,YAAY,CAAC;IAC/B,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,YAAY,CAAC;IAChC,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,iEAAiE;IACjE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,SAAS,CAAC,EAAE,CACV,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,UAAU,EAC1B,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;IACpD,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAC1E,iDAAiD;IACjD,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;IACpE,8GAA8G;IAC9G,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAiB,SAAQ,OAAO,CAAC,UAAU,CAAC;CAAG;AAwBhE;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,OAAO,GAAE,UAAe,GAAG,IAAI,CAOrD;AAED,eAAO,MAAM,IAAI;IACf;;;OAGG;eAEI,OAAO,WACH,UAAU,YACV,gBAAgB,GACxB,OAAO,CAAC;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,WAAW,CAAC;KACnB,CAAC;IAWF,wCAAwC;gBAC5B,OAAO,YAAW,OAAO,CAAC,UAAU,CAAC,GAAQ,IAAI;CAK9D,CAAC"}